As Hypertection is an agentless solution, it resides on the hypervisor level.
Hypertection system includes the components, which are installed on each hypervisor (Host Agents), and Management Console, which can be installed on any PC in the corporate network with administrator rights.
Management Console can connect to any hypervisor with installed Hypertection Host Agent and obtain the lists of hosted virtual machines and their snapshots. The general list of connected hypervisors, virtual machines and snapshots is built. Administrator chooses the scope for scanning and thus forms the scanning request.
Hypertection gets access to the Settings section of each virtual machine thus obtaining information about it and its disks. Then, Hypertection gets access to the disks (file system) of all machines and snapshots and active memory of online virtual machines (full access to active memory is available currently only for Hyper-V hosts) from the scanning scope. These data are passed to the antivirus engine, installed on the hypervisor. When accessing online virtual machines on Hyper-V host, VSS technology is used to guarantee data integrity.
Hypertection uses Microsoft Security Essential antivirus engine for Hyper-V (it is installed for free; independently from Hypertection installation) and ClamAV antivirus engine for VMware ESX(i) (it is included to the Hypertection installation pack; database updates are free). Using one antivirus engine for all your virtual machines allows you to cut licensing costs, forget about AV storms and 9 a.m. problem, and also make your antivirus policy independent and flexible. See more Hypertection benefits.
Antivirus engine scanning results are then interpreted by Hypertection, compiled and passed to the Management Console to form general report.